TI-2016-04190 CVE-2016-4847 · GHSA-hpx2-x5rv-vgqmCross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9…Priority LOW 30Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01286 · Published 2017-04-20 · No fix listed CWE-79